First published: Fri Jul 04 2003(Updated: )
Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mantis Mantis | =0.17.5 | |
debian/mantis |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.